The Proxy exe File Malware Analysis

Technical Analysis

File Name	Proxy.exe
File Type	PE32+ executable (console) x86-64, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-11-25 12:00:30 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	5509c986490c2f576ce63553bbed3ef1
SHA1	97e592040dce1787cc29cccb0064509faec1cb71
SHA256	6d769ecc1720b10ebd9de62c9ea892c654453e46302e03aa6af9e510b607c1bf
SHA512	e58b7088309ebdc71477bafc0d1cfe470183567cd20265f18a7f223255b6fb680d37d04d4c044b5c4784354ebca68e91fc42aa08abc7e3a7e74fa05445ef3985
ImpHash	d98822734abd8505a6ba2e8d94e1d733

PE Analysis

Basic Information

▼

Image Base	`0x140000000`
Entry Point	`0x14000fbdc`
Compilation Time	2024-02-23 14:39:20
Checksum	0x00000000 (Actual: 0x0049d8e2)
OS Version	6.0
PEiD Signatures	`PE32+ executable (console) x86-64, for MS Windows`
PDB Path	`E:\Games\Growtopia\Proxy\GTProxy\cmake-build-relwithdebinfo\src\Proxy.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	19 libraries
Exports	0 functions
Resources	1 Resources
Sections	9 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	3,404,414 bytes	3,404,800 bytes	5.49 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`9B74AE2000AE9C478C1DBCFF30B34E70`
`.rdata`	`0x00341000`	1,030,571 bytes	1,030,656 bytes	5.28 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`1657F02E406BA4787B88617923503352`
`.data`	`0x0043d000`	152,241 bytes	131,584 bytes	4.50 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`4ECC48DFC9849D3D90F9D9A45C6B7463`
`.pdata`	`0x00463000`	177,708 bytes	178,176 bytes	5.97 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`319D965AE82DF99F624D96A9402F21FF`
`.idata`	`0x0048f000`	25,979 bytes	26,112 bytes	4.27 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`9B6690057D202BF8002FB358D3A80DFC`
`.tls`	`0x00496000`	799 bytes	1,024 bytes	0.01 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`954DFEBF227F2124AE8F5D9143D12CF3`
`.00cfg`	`0x00497000`	373 bytes	512 bytes	0.43 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`90F91F056EEE4C2F22264524663C26DB`
`.rsrc`	`0x00498000`	1,113 bytes	1,536 bytes	2.25 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`19547D8C7BF1BBE6C8BB98629CEDDF38`
`.reloc`	`0x00499000`	36,080 bytes	36,352 bytes	4.11 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`43323CC1459A91D97834570BE19EB36C`

Resource Analysis

▼

Total Resources: 1 (406 bytes)

Resource Type	Count	Total Size	Percentage
RT_MANIFEST	1	406 bytes	100%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The Proxy.exe File Analysis